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In this paper the correct calculations of the mutual information of the whole trans- 
mission, the quantum bit error rate (QBER) are presented. Mistakes of the general 
conclusions relative to the mutual information, the quantum bit error rate (QBER) and 
the security in Wojcik's paper [Phys. Rev. Lett. 90, 157901(2003)] have been pointed 
out. 
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After the pioneering work of Bennett and Brassard published in 1984[1], a variety of quantum 
secret communication protocols have been proposed( for a review see [2]). Recently, a quite dif- 
ferent quantum cryptographic protocol (namely, the 'ping-pong' protocol) has been proposed by 
Bostrom and Felbinger[3], which allows the generation of a deterministic key or even direct secret 
communication. The protocol has been claimed to be secure and experimentally feasible. However, 
since the security of the 'ping-pong' protocol can be impaired as far as considerable quantum losses 
are taken into account, very recently Wojcik has presented an undetectable eavesdropping scheme 
on the 'ping-pong' protocol[4]. The aims of this paper are as follows: (1) to present the correct 
calculations of various mutual information (i.e., the mutual information between the legitimate 
sender (Alice) and the legitimate receiver (Bob) and the mutual information between Alice and the 
eavesdropper (Eve)) and the quantum bit error rates (QBERs, i.e., Bob's BQER and Eve's QBER); 
(2) to point out the mistakes relative to the mutual information, the QBERs and the security in 
Wojcik's paper and correct them. 

Since Wojcik's scheme is a realistic scheme, all the total numbers of Alice's bits, Bob's bits and 
Eve's bits should be finite in his paper. This is important in pointing out the mistakes in Wojcik's 
paper. This can be seen later. The mutual information in Wojcik's paper is only and essentially a 
single-bit mutual information. This physical quantity is used inappropriately in Wojcik's paper to 
stand for the mutual information of the whole transmissions (multi bits), alternatively, the mutual 
information of the whole transmissions (multi bits) are not worked out appropriately in Wojcik's 
paper. This can also be seen later. So, in this paper, first, let us give the formulae of the mutual 
information of the whole transmissions and the QBERs. Incidentally, one should keep in mind that, 
provided that Alice's bits are given, the mutual information between Alice and Bob (Eve) and the 
QBER in Bob's (Eve's) bits should be completely determined by the bits Bob (Eve) obtains. 

Let J be the total number of Alice's bits and Jq be the number of all '0' bits and Ji be the 
number of all '1' bits in Alice's bits. Obviously, J = Jq + Ji- Let ao(ai) be the rate of the '0' ('!') 
bit in Alice's bits, then oq = Jo/ J and ai = Ji/J = 1 — cq. If an assumption that oq = ai = 1/2 
is employed, then Jq = Ji = J/2. In this paper such an assumption is employed hereafter. 

Let M be the total number of Bob's bits and Mq be the number of all '0' bits and Mi be the 
number of all '1' bits in Bob's bits. Obviously, M = Mq + Mi. Let 5o(&i) be the rate of the '0' 
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('1') bit in Bob's bits, then 60 = Mq/M and h = Mi/M = 1 - 6o- 

Obviously, only if an ideal quantum channel is assumed, then M = J; otherwise, M should be 
less than J due to the channel losses. In this paper, later, J is assumed to be the effective number 

of Alice's bits which can be transmitted to Bob. In this case M = J. 

Let ioo be the total number extracted from Alice's Jq '0' bits and Bob's Mq '0' bits in the case 
that when Alice sends a '0' bit Bob accordingly gets a '0' bit by his measurement. Lqo is named 
as the number of the pair (0,0). Similarly, Liq, Lqi and Ln can be defined. Their rates can be 
worked out as follows: 

Coo = Loo/ J, coi = Loi/J, cio = Lio/J, cii = Lii/J. (1) 

According to above definitions, the following relations can be built up easily: 

-^00 + Loi = Jo = J/2, (2) 

Lio + ill = Ji= J/2, (3) 

Loo + Lio = Mo, (4) 

Loi + Lii=Mi = J- Mo. (5) 

Let Qb be the number of the wrong bits in Bob's bits comparing with Alice's bits. Easily, one 
can obtain Qh = Loi + Lio- Accordingly, the QBER in Bob's bits can be obtained: 

Qb = Qb/J = {Loi + Lw)/J. (6) 
Taking advantage of equations 1-6, the following rates can be arrived at 



Coo = (26o + 1 - 2(75)/4, coi = (1 - 26o + 2qb)/4., 
cio = (26o - 1 + 2(7b)/4, cii = (3 - 26o - 2gf,)/4. 



(7) 



It seems that the values of bo and qb can be chosen freely in the domain [0,1], however, since 
< Coo, coi, cio, cii, 60, g < 1, the following limitations exist: 

I 5 - 96 < 60 < 5 + gh, < gb < i; 
\ 96 - 5 < 60 < I - 96, 5 < 96 < 1- 

According to the definition of the mutual information, one can obtain the mutual information 
between Alice and Bob as follows: 

Iab = H{A : B) = H{A) + H{B) - H{A, B) 
1111 
= - 2 2 ~ 2 2 ~ ^'0 - (1 - bo) log2(l - 60) 

, 260 + 1 -2^5, 260 + 1 -2^6 , 1-260 + 2^6, 1 - 260 + 2^6 

+ logo lOgn 

, 26o-l + 2g. 26o-l + 2gff, , 3 - 26o - 2% , 3 - 26o - 2gfa , , 

+ 1 log2 1 + 1 log2 ^ , (9) 

which is a function of 60 and qb- Once Bob finishes his measurements, then in his bits the 60 is 
determined and accordingly the qb is determined provided that Alice's bits are given. Up to now, 
the above equation has established the relation between the mutual information and the QBER. 
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Let us see the properties of the equation (9): (a) If qt = 0, according to the equation (8) one can 
obtain bo = 1/2. Substituting qb = and bo = 1/2 into the equation (9), one can obtain Iab = 1- 
This is easily understood. Since Bob gets the whole bits correctly, it is sure for him to get the whole 
information, (b) If qi, = 1/2, then Ij^g = disregarding the value of bo completely. This also can be 
seen from figure 1. In fact, when Bob gets his bits simply by guess instead of his measurements, it 
is possible for him to get J/2 wrong bits (i.e., qb = 1/2). In this case, he should get no information. 
Incidentally, although it is very possible for Bob to get J/2 wrong bits (i.e., qb = 1/2) by guess, 
there are other possibilities, (c) Substituting I — qb for qb in the equation (9), the equation (9) 
does not change. This means that if Bob can get the mutual complementary bits of his bits he may 
have the same mutual information. This can be easily seen from figure 1. The figure is symmetric 
about the qb = 1/2. Specifically, in both cases of qb = and qb = 1, Iab = 1- Therefore, when one 
uses the miitiial information as the criteria to judge how much information Bob has obtained, an 
assumption that the mutual complementary bits should correspond to the same information (e.g., if 
'00100' defines a character, then '11011' as the former's mutual complementary bits should defines 
the same character) is employed; otherwise, such a criteria is incorrect. Since the assumption is 
disadvantageous for the message transmission in reality, the mutual information is not the quantity 
which is good enough to character the successfully transmitted message. By the way, the strategy 
combining the mutual information with the QBER is feasible as an improvement. In addition, as 
mentioned before, once Bob gets more or less wrong bits relative to J/2 by his guess, it is possible 
for him to get some information responding to his naive guess, (d) For a given qb, Iab is a bmction 
of ho, that is, it is possible that two different 6o's do not correspond to a same Iab but a same qb 
(e.g. see the lines 7 and 8 in table 1), the . This means that the QBER is not a suitable quantity 
in characterizing the amount of the information Bob gains form Alice. 

Similarly, one can work out the mutual information between Alice and Eve. Let K be the total 
number of Eve's bits and Ko be the number of all '0' bits and Ki be the number of all '1' bits in 
Eve's bits. Obviously, K = Ko + Ki. Let eo(ei) be the rate of the '0' ('1') bit in Eve's bits, then 
eo = Ko/K and ei = K\/K = 1 — cq. 

Let Noo be the total number extracted from AHce's Jq '0' bits and Eve's Ko '0' bits in the case 
that when Alice sends a '0' bit Eve accordingly gets a '0' bit by her eavesdropping. A^oo is named 
as the number of the eavesdropping pair (0,0). Similarly, A^io, A^oi and A^n can be defined. Their 
rates can be worked out as follows: 



Let Qe be the number of the wrong bits in Eve's bits comparing with Alice's bits. Easily, one 
can obtain Qe = A^oi + A^io- Accordingly, the QBER in Eve's bits can be obtained: 



Assume Eve can attack all the bits, then K = J. According to the definition of the mutual 
information, one can obtain the mutual information between Alice and Eve as follows: 



doo = Noo/K, dot = Noi/K, 



Nio/K, dn 



Nii/K. 



(10) 



ge = Qe/J = {Noi + Nto)/J. 



(11) 



Iae = H{A:E)=H{A)+H{E)-H{A,E) 




1 - 2eo + 2ge 
4 



4 



2eo - 1 + 2ge , 2eo-l + 2ge , 3 - 2eo - 2^^ , 3 - 2eo - 2ge 

+ 1 l0g2 1 + 1 l0g2 ^ • (12) 

Let us turn to point out the mistakes in Wojcik's paper. First, see two obvious facts: 

(i) in Wojcik's paper, Bob's QBER and Eve's QBER are precisely 1/4. Then one would like 
to ask how many wrong bits in Bob's (Eve's) bits provided that the total bit number M is odd 
or 21 + 2. Assuming M = 201, 202, 203, whether the corresponding answers are 50.25,50.50,50.75 
respectively? If so, how ridiculous they are for the numbers of the wrong bits are noninteger. It is 
the wrong QBER=l/4 that leads to the ridiculous results. 

(ii) According to Wojcik's figure 4, one can find when the channel transmission efficiency is zero, 
both Eve and Bob still can get information from Alice and Eve's is larger than Bob's. Another 
ridiculous result! 

All these have obviously shown that there are really mistakes in Wojcik's paper. In fact, there 
are more mistakes in his paper. These can be seen as follows. In the ping-pong protocol with ideal 
quantum channel, Bob's bits are obtained uniquely and deterministically, which are same as Alice's. 
For example, if Alice's bits are '100110', then Bob gets '100110' after his measurements. In Wojcik 
eavesdropping scheme, due to Eve's attacks with help of channel losses, Bob's (Eve's) bits are not 
unique in theory, and only after his (her) measurements his (her) bits are determined. For an 
example: Let 'u' ('s') be Eve's attack without (with) the symmetry operation. Assume Alice's bits 
are '100110' and Eve's attacks are 'susuus'. Also Assume that the transmission efficiency r] of the 
quantum channel is not greater than 50%, for in this case Eve can attack also the bits. According 
to Wojcik's scheme, taking advantage of the following conditional probability distributions: 

Pooo = 1' Pool — Poio = Poll = 0> Pioo = Pioi = Piio = Pill = 1/4; 

Pooo = Pool = Poio = Poll = 1/4, Pf 11 = 1, Pfoo = Pfoi = Pf 10 = 0; (13) 

in theory it is possible for Eve to get any one of the following batches: '100110', '100111', '100100', 
'100101', '100010', '100011', '100000', '100001', '101100', '101101', '101110', '101111', '101000', 
'101001', '101010' and '101011'. According to equation (12), it is easy to work out the mutual 
information for each batch of bits. Obviously these batches do not lead to a same value of Iae 
and a same QBER (See table 1). This example denies Wojcik's conclusion that the Iae is always 
0.311 and the QBER is always 1/4. It is very easy to be understood that when Eve gets different 
batches of bits it is quite possible for her to have different mutual information with Alice (See table 
1). However, which batch of bits Eve will get on earth by his measurements can not be deter- 
mined beforehand, for each one can occur with its own probability (See table 1). Only after Eve's 
measurements, one can know which one it is exactly. From table 1, one can also deny Wojcik's 
another general conclusion that Iae is always larger than IAB^ for in some cases Iae = (See 
Table 1). So there must be mistakes in Wojcik's calculations of the mutual information. I think it 
is the confusion between the single-bit mutual information and the multi-bits mutual information 
which leads to the mistakes. Hence, intuitively, the security estimation based on the wrong mutual 
information in Wojcik's paper is also not reliable anymore. 

Let Ju{Js) be the number of Alice's bits suffering the 'u' ('s') attacks, then J = Ju + Js = 
JuO + Jul + JsO + Jsi- Further, still assume that after Eve's 'susuus' attacks, Eve gets her '100110' 
from Alice's '100110'. Then J^o = 1, Jm = 2, J^o = 2,J„i = 1, N^g = l,N^i = 0,N^o = 0,7VJ\ = 2, 
A^oo = 2,Afoi = Oj-^io = Oj-^ii = Iv The extracted probability distributions of the eavesdropping 
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pairs (0,0), (0,1), (1,0) and (1,1) can be calculated as follows: 

ATM IVrU lUU ATM 

•u _ -''oo _ 1 +u — -'''oi _ n -am — -''^10 _ n — ■''^ii _ i . 

^00 = 'J — — ''01 = 'J — — '-10 = 'J — — U> ''11 = 'J — — ■'■5 
JuO ^uO 'Jul 'Jul 

Iqq — — 1, _ — u, _ — u, _ — i. {i^j 

'JsO 'JsO 'JsO 'Jsl 

They are apparently different with the conditional probability distributions: 

*oo — Pooo + Pool ' Poi — -Poio + Poll ' *10 7^ f'lOO + PlOl ' *11 7^ PllO + Pill i 

*oo 7^ Pooo + Pool ' Poi T^Poio +Poii' *io = Ploo + Pioi ' *ii = Piio +Piii- (15) 

The essential reason is that the number J = 6 of the whole bits is finite. By the way, since Wojick's 
scheme is a realistic scheme, J should be finite. Generally speaking, when J is large enough, then 
the extracted probability distributions may be close to the conditional probability distributions. 
Only when all the J, J„i and Jgo are infinite, the extracted probability distributions are equivalent 
to the conditional probability distributions, that is, 

-^00 ^01 
*00 = 'J =P000 +P001 = 1' ^01 = 'J = Polo +Poii — 
'JuO 'JuO 



J.U 

I'll 
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Af" 1 ?V" 1 

fllO _ u , « _£ y.«=illl_„« ,„« - t. 

J — PlOO PlOl ~ 9 ' '-11— T — PllO T^Plll ~ 9' 
Jul ^ 'Jul ^ 

.s = - „^ + - _ f'' = 1101 _ s , s _ i 

''00— 7 — Pooo + Pool ^ o ' ''01— 7 — PolO + Poll — o ' 
JsO ^ JsO ^ 

*!o = ^ = p!oo + Pfoi = 0, t\r ^ ^ = v\io + Pf 11 = 1- (16) 

'JsO 'Jsl 

Assume that J„o = 'Jul = <^sO = -^si = -^74 (same hereafter), then one can obtain 

eo = Ko/J = {Noo + Nw)/J = (Ko + ^i"o + ^oo + N^o)/J = V2, 

= Qe/J = {Qeu + Qes)/J = {N^l + N^o + ^01 + ^fo)/"/ = 1/4- (17) 

Substituting eo = 1/2 and = 1/4 into the equation (12), then one can obtain Iae = | log2 3 — 
1 w 0.189, which is different from the value Wojcik claims. This is easily understood. As I 
have mentioned before, in Wojcik's paper, the mutual information arc essentially single-bit mutual 
information. Since Eve knows exactly when the 's' operations are performed, for each bit the 
mutual information can be easily worked out and really not change. However, such single-bit 
mutual information is not suitable for representing the multi-bit mutual information. Prom my 
deduction, one can see it is the inappropriate use of the mutual information which leads to the 
wrong result in Wojcik's paper. Accordingly, there are mistakes in Wojcik's figure 4. Intuitively, 
the security estimation based on the wrong mutual information in Wojcik's paper is also not reliable 
anymore. 

To summarize, 1 have presented the calculations of the multi-bit mutual information and the 
QBERs. A number of mistakes in Wojcik's have been found and pointed out. 

This work is supported by the National Natural Science Foundation of China under Grant No. 
10304022. 
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Table 1 The possibility, the QBER, the rate of '0' bit in Eve's bits and the mutual information 
between Alice and Eve for possible batches of bits. 



Eve's bits possibility 


q 


eo 


Iab 


'100110' 


1/16 





1/2 


1 


'100111' 


1/16 


1/6 

/ 


1/3 


0.459 


'100100' 


1/16 


1/6 


2/3 


0.459 


'100101' 


1/16 


1/3 


1/2 


0.082 


'100010' 


1/16 


1/6 


2/3 


0.459 


'loooir 


1/16 


1/3 


1/2 


0.082 


'100000' 


1/16 


1/3 


5/6 


0.134 


'100001' 


1/16 


1/3 


2/3 


0.093 


'101100' 


1/16 


1/3 


1/2 


0.082 


'101101' 


1/16 


1/2 


1/3 





'101110' 


1/16 


1/6 


1/3 


0.459 


'101111' 


1/16 


1/3 


1/6 


0.093 


'101000' 


1/16 


1/2 


2/3 





'101001' 


1/16 


2/3 


1/2 


0.082 


'101010' 


1/16 


1/3 


1/2 


0.082 


'101011' 


1/16 


1/2 


1/3 






Alice's bits are '100110'. Eve's attacks are 'susuus'. 
The transmission efficiency r/ of the quantum channel is assumed to be not greater than 50%. 



Caption 

Figure 1 The mutual information between Alice and Bob as a function of q and 6o- See text for 
q and 6o- (a) surface diagram; (b) contour diagram. 
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